Description
The package grpc before 1.24.4; the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPackageDefinition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | grpc | unspecified – < 1.24.4 | 1.24.4 |
| — | @grpc/grpc-js | unspecified – < 1.1.8 | 1.1.8 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @grpc/grpc-js | < 1.1.8 | 1.1.8 | GHSA-pp75-xfpw-37g9 |
| npm | grpc | < 1.24.4 | 1.24.4 | GHSA-pp75-xfpw-37g9 |